Package Intel MCP
Package intelligence for AI agents across npm, PyPI, crates.io and deps.dev. No API keys.
Open source Repository Open in the app JSON README (API)
About
Package intelligence for AI agents across npm, PyPI, crates.io and deps.dev. No API keys.
Details
- Kind
- MCP servers
- Topic
- Developer tools
- Publisher
- com.datakoot
- Origin
- official
- Category
- ferramentas
- Transport
- http
- Version
- 2.1.0
- Last push
- 2026-09-07T17:45:14Z
- Repository state
- ativo
- Language
- JavaScript
- License
- MIT
- Added
- 2026-09-02 17:00:56
- Updated
- 2026-09-02 17:00:56
- Origin id
com.datakoot/npm-pypi-crates-packages
README
# Package Intel MCP — by Datakoot
Software supply-chain intelligence for AI agents — as MCP tools your agent can call mid-task, so it can vet a dependency *before* it installs it. Covers npm, PyPI and crates.io. No API keys.
## Tools
| Tool | What it does | Source |
|---|---|---|
| `package_info` | Metadata for a package: description, latest version, license, homepage & repo links | npm / PyPI / crates.io |
| `package_versions` | Full version history with release dates | npm / PyPI / crates.io |
| `package_downloads` | Download counts and popularity signal | npm / PyPI / crates.io |
| `package_dependencies` | Direct dependencies for a given version | deps.dev |
| `package_health` | Health signals: OpenSSF Scorecard, stars, dependents | deps.dev |
| `package_search` | Search for packages by keyword | npm / PyPI / crates.io |
Every tool accepts an `ecosystem` of `npm`, `pypi`, or `crates`. No API keys required.
## Quick start
```
claude mcp add --transport http package-intel https://package.datakoot.com/mcp
```
Or point any MCP client at `https://package.datakoot.com/mcp`.
## Try it in 10 seconds — no key, no signup
Paste this into a terminal:
```bash
curl -s https://package.datakoot.com/mcp \
-H 'content-type: application/json' \
-H 'accept: application/json, text/event-stream' \
-d '{"jsonrpc": "2.0", "id": 1, "method": "tools/call", "params": {"name": "package_health", "arguments": {"ecosystem": "npm", "name": "express"}}}'
```
You get a supply-chain health snapshot for the npm package `express` — versions, downloads, dependencies, maintenance signals — no API key, nothing to sign up for.
Or point any MCP client at the URL and just ask your agent, in plain language:
- "How healthy is the npm package `express`?"
- "Before I add `left-pad`, is it actively maintained and widely used?"
## Data & attribution
Data comes from the public registry APIs for [npm](https://registry.npmjs.org), [PyPI](https://pypi.org) and [crates.io](https://crates.io), plus [deps.dev](https://deps.dev) (Google Open Source Insights, CC-BY 4.0) for dependency graphs and OpenSSF Scorecard health signals. Package data is served from official public APIs and is informational.
Part of [Datakoot](https://datakoot.com) — keyless intelligence APIs for AI agents.